november 30, 2021
SentinelOne Vs. Emotet – Quarantine and Kill
⚔️ Watch how SentinelOne quarantines and kills Emotet malware. Emotet initially launched in 2014 as a simple banking trojan and over the years it has become one of the most prolific (and ultimately damaging) malware frameworks. After early success, Emotet quickly expanded its capabilities to reach into victims’ contacts and generate spam emails to achieve further infection. When AV tools started catching up, Emotet evolved into a truly polymorphic malware that delivers a custom variant to every victim, allowing it to entirely bypass signature-based security solutions. It also included sophisticated sandbox and virtualization detections to avoid tools typically used by malware researchers.
In early 2021, Emotet was the focus of a massive law enforcement operation, dubbed ‘Operation Ladybird’. This global operation (public and private sector participants) was able to temporarily subdue the Emotet infrastructure..until November of 2021. As of November 2021, and to present, Emotet is ramping up spam and C2 activity. Some evidence indicates some shared use of the Trickbot infrastructure helping facilitate the resurrection of Emotet.
#emotet #cybersecurity #malware #infosec #ransomware #endpointprotection
Gerelateerde resources
Resource
SentinelOne PartnerOne - America's 2025
⛳️ Last week in Pebble Beach the America's best cybersecurity partners came together for our annual PartnerOne summit. Check out…
View Asset
Resource
Just a Sec: Cybersecurity Unfiltered—Fast, Frank, and From the Front Lines
Welcome to the first-ever Just A Sec, a no-holds-barred, quick-fire monthly livestream. It’s cybersecurity like you’ve never heard it before—unfiltered,…
View Asset